Effective October 7, 2026
Privacy Policy
Privacy by design. Data minimization by default. Zero AI training on creator assets.
Privacy is Audence’s foundational commitment to creators, editors, and collaborators. We collect, process, and retain only the minimal data reasonably necessary to provide, secure, and maintain the creative review and workflow platform at audence.app. This policy describes Audence Software, Version 1.0. We do not sell your personal data or proprietary media, and we do not use your private creator assets to train public foundation artificial intelligence models.
1. Categories of Data Collected
In accordance with modern global privacy frameworks (including CCPA/CPRA and GDPR), the table below discloses the specific categories of data Audence collects, example data elements, and the exact business and operational purposes for each category:
| Data Category | Data Elements | Operational & Business Purposes |
|---|---|---|
| Account & Contact Info | Full name, email address, optional profile picture, birthday/age verification hash, contact phone number, and support correspondence. | Service delivery & security: Account authentication, role-based workspace permissions, security alerts, transactional billing and renewal notices, age gate verification, and customer support. |
| Creator Content & Media | Video cuts, revisions, source footage, audio stems, thumbnails, timestamped review comments, scripts, content ideas, calendar schedules, and sponsor deliverables. | Workspace collaboration: Video transcoding, encrypted storage, timecode-accurate feedback playback, and authorized publishing. Never sold or used to train public foundation AI models. |
| Usage & Telemetry | Browser and operating system type, IP address, request timestamps, referring URLs, rate-limit counters, and error diagnostic logs. | Infrastructure security & reliability: Preventing DDoS and credential-stuffing attacks via Upstash Redis, diagnosing application exceptions, and monitoring video streaming latency. |
| Platform Identifiers & Tokens | Audence user UUID, encrypted OAuth access/refresh tokens (YouTube, Google, TikTok, Twitch, Discord), Stripe customer and subscription IDs, and Plaid item IDs. | Authorized integrations & billing: Channel analytics sync, private YouTube draft publishing, recurring subscription billing, and bank verification. |
| Financial & Banking Metadata | Encrypted Plaid access token, financial institution name, Stripe Connect payout account status, and high-level ledger entries. Zero bank credential retention. | Accounting & payouts: Live in-memory balance checks for creator financial planning and automated editor invoice payouts via Stripe Connect. |
2. Use of Artificial Intelligence Models (Google Gemini)
Audence integrates artificial intelligence capabilities, collectively referred to as “Audie AI”, to assist creators with content brainstorms, title and tag recommendations, timeline feedback summaries, and channel analytics breakdowns.
Model Inference Provider: Audence utilizes the Google Gemini API as its foundation language model engine. When you interact with Audie AI or invoke automated summarization:
- Only the specific text prompt, idea notes, or video review comments necessary to fulfill the requested task are transmitted securely over TLS 1.3 to the Google Gemini API.
- Zero Training on Creator Assets: In accordance with our enterprise commercial terms with Google, neither Audence nor Google uses your private creator footage, video cuts, timeline comments, source files, or workspace prompts to train, retrain, or fine-tune public foundation AI models.
- AI processing is strictly stateless and transactional: inputs are evaluated in real time to return suggestions, outlines, and summaries, and are not retained by the AI engine for independent analysis.
- AI outputs are generated probabilistically and should always be reviewed and approved by creators prior to public release or commercial implementation.
3. Third-Party Data Processors
To deliver high-availability cloud infrastructure, zero-egress media storage, and secure payment processing, Audence partners with trusted, industry-leading third-party processors. Each processor is contractually bound to process data solely on our instructions and in compliance with rigorous security standards:
Supabase Inc.
Role: Core database, user authentication, session management, and real-time collaboration.
All records are protected by strict PostgreSQL Row Level Security (RLS) policies and encrypted at rest with AES-256.
Cloudflare, Inc. (Cloudflare R2)
Role: High-speed, zero-egress S3-compatible encrypted object storage for video cuts, revisions, source footage, and thumbnails.
Media is served strictly via authenticated, short-lived presigned URLs and purged automatically upon deletion.
Stripe, Inc.
Role: PCI-DSS Level 1 compliant payment processor for subscriptions, invoices, and editor payouts via Stripe Connect.
Audence never stores credit card or debit card numbers; all billing management is safeguarded directly within Stripe.
Plaid Inc.
Role: Financial institution connectivity and read-only balance verification.
Operates under our strict zero-retention policy: balances are queried live in server memory and immediately discarded.
Upstash, Inc.
Role: Serverless Redis caching and sliding-window rate limiting.
Used strictly for defensive network security: rate limiting API endpoints, blocking credential brute force, and DDoS mitigation.
Resend, Inc.
Role: Transactional email delivery service.
Dispatches account confirmation links, password reset emails, annual subscription pre-renewal alerts, and collaborator invites.
4. User Data Retention & Hard-Deletion Policies
Audence adheres to a strict data minimization schedule, retaining personal and workspace information only for the period necessary to deliver our services or satisfy statutory legal obligations:
- Active Workspaces: Video cuts, draft versions, source files, and comments are retained as long as your workspace account remains active and in good standing.
- Banking Data (Zero Retention): When you connect a financial institution via Plaid, Audence queries balances and recent activity live in volatile server memory. We never store your bank login credentials, routing numbers, account numbers, or historic transaction ledgers. When you disconnect your bank, the encrypted access token is immediately revoked and purged.
- Ephemeral Security Tokens: Password reset tokens, magic sign-in links, and account deletion confirmation tokens automatically expire after exactly 30 minutes and are permanently cleared once consumed.
- Account & Workspace Hard-Deletion: When you initiate account deletion via Settings → Profile → Danger zone (or workspace deletion), our automated cascade routine irreversibly hard-deletes all associated database records:
- All draft videos, versions, project comments, and timecoded feedback rows.
- All content calendar entries, content ideas, and workflow automation definitions.
- All team role assignments, direct messages, and notification records.
- All financial entries, billing metadata, and encrypted OAuth tokens.
- Cloudflare R2 Media Purge: The deletion routine sweeps the entire workspace and user prefix in Cloudflare R2, permanently deleting all uploaded video cuts, source footage, revisions, and image thumbnails.
Once confirmed, account and workspace deletion is complete, permanent, and cannot be reversed. Temporary database backup snapshots are routinely overwritten and age out within 30 days.
5. Connected Services & Google API Policy
When you link external platforms (such as YouTube, TikTok, Meta, Twitch, or Discord), Audence requests only the minimal OAuth scopes required to perform authorized creator operations:
- Google Sign-In: Basic profile and email used solely to authenticate your identity.
- YouTube API Services: Scopes
youtube.readonly,youtube.upload, andyt-analytics.readonlyallow channel analytics monitoring and private draft publishing. Tokens are encrypted using AES-256 at rest and revoked immediately upon disconnection.
Audence’s use and transfer to any other app of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. YouTube services are also subject to the YouTube Terms of Service and Google Privacy Policy.
6. Your Privacy Rights (GDPR, CCPA/CPRA)
Depending on your location, you may have specific statutory rights regarding your personal information, including:
- Right to Know & Portability: You may request a machine-readable copy of the personal data Audence holds concerning your account.
- Right to Deletion: You may permanently delete your account, workspace, and all associated media files at any time through self-service controls in your dashboard.
- Right to Rectification: You may update or correct inaccurate profile information directly in Settings.
- Right to Non-Discrimination: We do not discriminate against any user for exercising their statutory privacy rights.
To exercise any statutory privacy rights, use the self-service tools in your dashboard or contact us at https://audence.app/support. We respond to verified consumer requests within 30 days.
7. Children's Privacy & Age Gate Verification
Audence is not directed to children under 13 years of age. In strict compliance with COPPA:
- Users must be at least 13 years old to register or access Audence.
- Users must be at least 18 years old (or have verified parental consent) to sign paid brand sponsorship contracts or receive milestone payouts via Stripe Connect.
- If an account enters a birthdate indicating an age under 13, the account is immediately blocked, the raw birthdate is purged from database storage, and only an irreversible hash and unlock date are retained to prevent premature re-registration.
8. Contact & Data Protection Inquiries
If you have questions, feedback, or concerns regarding our privacy practices, data protection policies, or sub-processors, please reach out to our privacy compliance team at legal@audence.app or submit a request through https://audence.app/support.